PT-2006-1079 · Nvidia · Nvidia Binary Graphics Driver

Derek Abdine · Published 2006-10-18 · Updated 2018-10-17 · CVE-2006-5379

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: NVIDIA Binary Graphics Driver versions prior to 1.0.8776

Description: The issue concerns the accelerated rendering functionality of the NVIDIA Binary Graphics Driver, which allows local and remote attackers to execute arbitrary code via a large width value in a font glyph. This can be used to overwrite arbitrary memory locations, potentially leading to a breach of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations: For versions prior to 1.0.8776, update to version 1.0.8776 or later to resolve the issue. As a temporary workaround, consider restricting access to the accelerated rendering functionality until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-09538

CVE-2006-5379

Affected Products

Nvidia Binary Graphics Driver

References · 28

• 🔥 https://exploit-db.com/exploits/2581 · Exploit
• 🔥 http://download2.rapid7.com/r7-0025/nv_exploit.c · Exploit
• https://bdu.fstec.ru/vul/2015-09538 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-5379 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-5379 · Vendor Advisory
• http://rapid7.com/advisories/R7-0025.jsp · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:007 · Vendor Advisory
• http://secunia.com/advisories/22419 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-5379 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200611-03.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5379 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 · Vendor Advisory
• http://ubuntu.com/usn/usn-377-1 · Vendor Advisory
• http://securityfocus.com/archive/1/448860/100/0/threaded · Note
• http://kb.cert.org/vuls/id/147252 · Note